Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
🔗 CVE IDs covered (6)
📋 Description
CVE-2026-32285 — github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input CVE-2026-44740 — github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation CVE-2026-46680 — github.com/containerd/containerd: containerd: Privilege escalation via incorrect user ID handling CVE-2026-47262 — github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing CVE-2026-50195 — github.com/containerd/containerd: containerd: Arbitrary code execution via CRI checkpoint image tag poisoning CVE-2026-53488 — github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2026:35111
- externalhttps://access.redhat.com/security/cve/CVE-2026-46680
- externalhttps://access.redhat.com/security/cve/CVE-2026-47262
- externalhttps://access.redhat.com/security/cve/CVE-2026-53488
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://images.redhat.com/
- externalhttps://access.redhat.com/security/cve/CVE-2026-50195
- externalhttps://access.redhat.com/security/cve/CVE-2026-32285
- externalhttps://access.redhat.com/security/cve/CVE-2026-44740
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35111.json